Privacy Policy
Privacy Policy
Last updated: 15.04.2026
As [COMPANY NAME — To be completed] ("Ligant", the "Company", "we"), we attach great importance to the privacy and security of your personal data. This Privacy Policy explains how the personal data of users who visit our website (reachable at info[at]ligant.com.tr) and use our services is processed under Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation.
1. Data Controller
Company name: [COMPANY NAME — To be completed]
Address: Maslak Mah. Büyükdere Cad. No:128 Sarıyer / İstanbul
Phone: +90 (212) 555 0 123
E-mail: info[at]ligant.com.tr
MERSİS: [MERSİS NO — To be completed]
2. Personal Data Processed
The following personal data is processed as provided by you:
- Identity Information: Name, surname, date of birth, gender (optional during registration)
- Contact Information: E-mail address, mobile phone, delivery and billing addresses
- Customer Transaction Information: Order history, billing information, payment method (card details are not stored; they are processed by the payment institution)
- Transaction Security Information: Password (hashed), IP address, session information, cookie data
- Marketing Information: Shopping preferences and interests, if you give explicit consent
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Creating and managing your membership
- Carrying out order, payment, invoicing and delivery processes
- Customer service, support and complaint management
- Processing return and exchange requests
- Fulfilling legal obligations (tax, commercial, consumer rights)
- Preventing fraud and ensuring website security
- If you give explicit consent: Campaign, discount and new product notifications
4. Legal Grounds for Processing
Your personal data is processed on the following legal grounds under Articles 5 and 6 of the KVKK:
- Establishment and performance of a contract (membership, sales agreement)
- Fulfilment of a legal obligation (tax, Distance Contracts Regulation, KVKK)
- Legitimate interest of the data controller (security, fraud prevention)
- Explicit consent (marketing communications, cookies)
5. Transfer of Data
Your personal data may be shared with the following parties only to the extent necessary to carry out the service:
- Cargo and Logistics Companies: Name, phone and address for order delivery
- Payment Institutions (POS, virtual POS providers): For payment processing
- E-invoice/E-archive Providers: For issuing legal invoices
- Authorised Public Institutions: In the event of a legal request
- Software Providers We Use: Hosting, e-mail, analytics (on servers in Turkey)
Your data is not transferred abroad. If a transfer becomes necessary, your explicit consent will be obtained in accordance with Article 9 of the KVKK.
6. Data Retention Period
- Membership data: As long as the membership is active + 10 years after the membership is deleted (Turkish Commercial Code)
- Order and invoice data: 10 years (Tax Procedure Law)
- Marketing permissions: Until the permission is withdrawn
- Cookie data: According to the cookie type (maximum 12 months)
7. Your Rights under Article 11 of the KVKK
As a data subject, you have the right to:
- Learn whether your personal data is processed
- Request information about the data processed
- Learn the purpose of processing and whether the data is used in accordance with that purpose
- Request correction of incomplete or inaccurately processed data
- Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK
- Request that correction/deletion/destruction be notified to third parties to whom the data has been transferred
- Object to a result against you arising from analysis of the processed data exclusively by automated systems
- Claim compensation if you suffer damage due to unlawful processing of the data
8. Applications
To exercise the rights above, you can send your application, together with documents verifying your identity, to:
- E-mail: info[at]ligant.com.tr
- Post: Maslak Mah. Büyükdere Cad. No:128 Sarıyer / İstanbul
- KEP (registered e-mail): [KEP ADDRESS — To be completed]
Applications are concluded within 30 days in accordance with Article 13 of the KVKK.
9. Data Security
Industry-standard measures are taken to keep your data secure:
- Data transmission with SSL/TLS encryption
- Storage of passwords with a one-way hash algorithm
- Authorisation and access controls
- Regular security and penetration tests
- KVKK awareness training for staff
10. Changes
This Privacy Policy may be revised in line with changes in legislation or updates to our services. The current version is always published on this page.